# 16 C.F.R. § 312.10 (2026): Data retention and deletion requirements

> Federal · Regulations · In force

URL: https://www.frixlaw.com/law-library/statutes/CFR_T16_P312_S312_10

## Section

- **Citation:** 16 C.F.R. § 312.10 (2026)
- **Heading:** Data retention and deletion requirements
- **Jurisdiction:** Federal
- **Kind:** Regulations
- **Status:** In force
- **Text as of:** August 14, 2026
- **Source:** Compiled text
- **Location:** Title 16 CFR: Commercial Practices / Chapter I: FEDERAL TRADE COMMISSION / Part 312: CHILDREN'S ONLINE PRIVACY PROTECTION RULE (COPPA RULE) / § 312.10: § 312.10   Data retention and deletion requirements.

## Text

An operator of a website or online service shall retain personal information collected online from a child for only as long as is reasonably necessary to fulfill the specific purpose(s) for which the information was collected. When such information is no longer reasonably necessary for the purposes for which it was collected, the operator must delete the information using reasonable measures to protect against unauthorized access to, or use of, the information in connection with its deletion. Personal information collected online from a child may not be retained indefinitely. At a minimum, the operator must establish, implement, and maintain a written data retention policy that sets forth the purposes for which children's personal information is collected, the business need for retaining such information, and a timeframe for deletion of such information. The operator must provide its written data retention policy addressing personal information collected from children in the notice on the website or online service provided in accordance with § 312.4(d).

## Nearby sections

- [16 C.F.R. § 312.1 (2026) § 312.1   Scope of regulations in this part.](https://www.frixlaw.com/law-library/statutes/CFR_T16_P312_S312_1.md)
- [16 C.F.R. § 312.2 (2026) § 312.2   Definitions.](https://www.frixlaw.com/law-library/statutes/CFR_T16_P312_S312_2.md)
- [16 C.F.R. § 312.3 (2026) § 312.3   Regulation of unfair or deceptive acts or practices in connection with the collection, use, and/or disclosure of personal information from and about children on the internet.](https://www.frixlaw.com/law-library/statutes/CFR_T16_P312_S312_3.md)
- [16 C.F.R. § 312.4 (2026) § 312.4   Notice.](https://www.frixlaw.com/law-library/statutes/CFR_T16_P312_S312_4.md)
- [16 C.F.R. § 312.5 (2026) § 312.5   Parental consent.](https://www.frixlaw.com/law-library/statutes/CFR_T16_P312_S312_5.md)
- [16 C.F.R. § 312.6 (2026) § 312.6   Right of parent to review personal information provided by a child.](https://www.frixlaw.com/law-library/statutes/CFR_T16_P312_S312_6.md)
- [16 C.F.R. § 312.7 (2026) § 312.7   Prohibition against conditioning a child's participation on collection of personal information.](https://www.frixlaw.com/law-library/statutes/CFR_T16_P312_S312_7.md)
- [16 C.F.R. § 312.8 (2026) § 312.8   Confidentiality, security, and integrity of personal information collected from children.](https://www.frixlaw.com/law-library/statutes/CFR_T16_P312_S312_8.md)
- [16 C.F.R. § 312.9 (2026) § 312.9   Enforcement.](https://www.frixlaw.com/law-library/statutes/CFR_T16_P312_S312_9.md)
- [16 C.F.R. § 312.10 (2026) § 312.10   Data retention and deletion requirements.](https://www.frixlaw.com/law-library/statutes/CFR_T16_P312_S312_10.md)
- [16 C.F.R. § 312.11 (2026) § 312.11   Safe harbor programs.](https://www.frixlaw.com/law-library/statutes/CFR_T16_P312_S312_11.md)
- [16 C.F.R. § 312.12 (2026) § 312.12   Voluntary Commission approval processes.](https://www.frixlaw.com/law-library/statutes/CFR_T16_P312_S312_12.md)
- [16 C.F.R. § 312.13 (2026) § 312.13   Severability.](https://www.frixlaw.com/law-library/statutes/CFR_T16_P312_S312_13.md)

---

Source: Frix Law Library, https://www.frixlaw.com/law-library/statutes/CFR_T16_P312_S312_10. Check the current official text before relying on it. Not legal advice.